Privacy Policy

1. Introduction

HahaTech LLC ("we," "us," "our," or the "Company") operates ADHD a Day (adhdaday.com, the "Site"), a subscription-based service that delivers daily motivational messages to subscribers via email. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit the Site or subscribe to the Service.

By using the Site or subscribing to the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Site or subscribe.

2. Information We Collect

2.1 Information You Provide Directly

When you subscribe to the Service, we collect:

When you contact us for support or feedback, we also collect:

2.2 Information Collected Through Payment

Payments are processed by Stripe through their hosted checkout page. We do not collect, process, or store your credit card number, CVV, or full billing details. Stripe provides us with:

For details on how Stripe handles your payment information, see Stripe's Privacy Policy.

2.3 Information Collected Automatically

When you visit the Site, certain information is collected automatically through cookies and similar technologies:

For full details on cookies, see our Cookie Policy.

3. How We Use Your Information

3.1 Service Delivery

• Deliver daily motivational messages to your email
• Send your welcome email upon subscription
• Process and manage your subscription
• Send unsubscribe confirmations

3.2 Communications

• Respond to support requests and feedback
• Send occasional promotional or feature announcement emails (you may opt out at any time)
• Send service-related notices (e.g., changes to the Service, billing issues)

3.3 Analytics and Improvement

• Understand how visitors use the Site
• Improve Site content, layout, and performance
• Analyze email engagement (open rates, click rates)

3.4 Advertising

• Measure the effectiveness of advertising campaigns via Meta Pixel
• Retarget visitors who have interacted with the Site

3.5 Legal and Security

• Comply with legal obligations
• Detect and prevent fraud or abuse
• Enforce our Terms of Use

4. How We Share Your Information

4.1 Third-Party Service Providers

We use the following third-party services to operate the Site and Service. Each provider receives only the data necessary to perform its function.

Links to their privacy policies:

• Stripe Privacy Policy
• Supabase Privacy Policy
• Resend Privacy Policy
• Hostinger Privacy Policy
• PostHog Privacy Policy
• Google Privacy Policy
• Meta Privacy Policy

4.2 When We May Disclose Information

We may disclose your information in the following circumstances:

• Legal compliance: When required by law, court order, or government request
• Protection of rights: To enforce our Terms of Use, protect our rights or property, or ensure user safety
• Business transfers: In connection with a merger, acquisition, or sale of assets (your information may transfer to the acquiring entity; we will notify you)
• With your consent: When you explicitly authorize us to share your information

4.3 What We Do NOT Do

• We do not sell your personal information to third parties
• We do not rent or lease subscriber lists
• We do not share your email address with other companies for their marketing purposes

5. Email Communications

5.1 Transactional Emails

As a subscriber, you will receive:

5.2 Promotional Emails

We may occasionally send promotional emails about new features, updates, or other information related to the Service. You may opt out of promotional emails at any time by:

• Clicking the "unsubscribe" link in any promotional email
• Contacting us at support@hahatech.team

Opting out of promotional emails does not affect delivery of your daily messages or other transactional emails.

5.3 CAN-SPAM Compliance

All emails include:

• A clear identification of HahaTech LLC as the sender
• A valid physical mailing address
• A working unsubscribe mechanism
• Honest subject lines that reflect the content

5.4 CASL Compliance (Canada)

For Canadian subscribers, we obtain express consent before sending commercial electronic messages. Every email includes:

• Clear sender identification
• A functional unsubscribe mechanism
• Our physical mailing address

You may file a complaint with the Canadian Radio-television and Telecommunications Commission (CRTC) if you believe you have received non-compliant messages.

6. Data Retention

When your subscription is cancelled (by you or due to non-payment), your personal data is deleted from our active systems. Stripe retains payment records according to their own retention policies and applicable law.

7. Your Privacy Rights

7.1 Rights for All Users

Regardless of your location, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from promotional emails at any time
• Cancellation: Cancel your subscription at any time

7.2 United States / California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Do Not Sell My Personal Information: We do not sell personal information. We do not share information for cross-context behavioral advertising.

To exercise these rights, contact us at support@hahatech.team. We will respond within 45 days.

7.3 Canadian Residents (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Right to Access: Request access to your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Withdraw Consent: Withdraw your consent to our use of your information
• Right to File a Complaint: File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at support@hahatech.team.

7.4 European Economic Area, UK, and Switzerland Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Withdraw your consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing

International Data Transfers: Your data may be transferred to and processed in the United States, where our servers and service providers are located. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards for international transfers.

To exercise these rights, contact us at support@hahatech.team. We will respond within 30 days.

7.5 How to Exercise Your Rights

To exercise any of the rights described above:

1. Email us at support@hahatech.team
2. Include your name, email address, and specific request
3. We may ask for additional information to verify your identity
4. We will respond within the timeframe required by applicable law

8. Children's Privacy

ADHD a Day is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

If we learn that we have collected personal information from a person under 18, we will delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@hahatech.team.

9. Data Security

We implement reasonable security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure storage through Supabase with encryption at rest
• Access controls limiting who can view subscriber data
• Stripe PCI-DSS compliance for all payment processing

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You use the Service at your own risk.

10. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. There is no industry-standard protocol for honoring DNT signals. We do not currently alter our data collection practices in response to DNT signals, but you can manage tracking through your browser's cookie settings or through the opt-out methods described in our Cookie Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify active subscribers by email.

Your continued use of the Site or Service after changes take effect constitutes acceptance of the updated Privacy Policy.